Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: OukB+Jt3+7SK+uXqjq5NkVk5x0mV88Kqk6VTbr3ioCI=
Subject key identifier: 53:9E:0D:E8:07:93:9B:82:7A:BD:76:54:F8:C7:7C:AF:34:E3:C9:4F
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019D378952B6B7B3E4347BB72F0923BB9993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 05C0
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: Ozls6J0or6DFsf/onS4Jms/ZMVjTS8MWZGzIzf6mpBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:52:b6:b7:b3:e4:34:7b:b7:2f:09:23:bb:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=539e0de807939b827abd7654f8c77caf34e3c94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:ca:59:6c:81:00:5b:e9:5b:8b:79:54:76:
4a:c3:f9:20:bb:ef:54:a4:12:b5:9a:b9:40:9c:c8:
90:78:9e:aa:ec:92:f9:ea:ad:a4:a6:d8:2d:68:cc:
20:d1:85:d0:ed:91:85:06:4a:3a:b8:3a:11:c0:b4:
97:79:f7:43:24:2a:46:7f:47:96:ad:fb:0b:48:ac:
65:2f:59:78:cb:b4:6d:b8:51:98:82:e3:63:07:25:
73:0a:6c:bf:b7:e2:30:55:72:e0:89:30:c6:2f:be:
6d:64:5b:a7:10:4c:bb:e9:2b:03:f7:dc:28:29:c5:
fd:f8:4b:f3:f6:63:d5:56:a5:63:37:df:64:a6:dd:
2e:f7:bd:1c:9a:74:04:97:de:f2:b5:28:58:87:65:
cc:91:45:08:9d:57:9b:9b:fb:a0:66:c6:99:da:27:
fb:ae:74:4c:83:bd:0c:4c:a7:31:b4:78:d4:54:92:
1e:ee:93:10:d8:3c:74:19:d2:8c:0b:18:bd:83:68:
d8:b0:d8:89:97:e7:81:2f:a3:70:7b:e2:3e:14:33:
67:78:29:ff:c7:df:e9:27:5b:4d:65:17:ec:d1:78:
9e:56:08:44:ee:c3:fc:8d:60:cd:49:5e:f7:fd:2b:
d3:52:73:d2:65:31:54:41:cf:9b:5b:62:5f:17:eb:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:0D:E8:07:93:9B:82:7A:BD:76:54:F8:C7:7C:AF:34:E3:C9:4F
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:11:cf:33:5e:9e:68:b0:78:4e:05:5f:1f:89:08:6a:b6:
53:86:97:d1:b0:53:5a:65:e7:12:59:ff:85:9b:c4:13:91:67:
d9:31:c2:ce:b0:4a:73:7d:5d:e1:64:7e:ab:ff:86:35:01:9f:
b4:ca:f2:cd:99:44:51:18:0e:aa:2a:0e:5a:d3:70:df:37:da:
9b:56:f6:db:8f:b9:d1:10:b7:04:37:ac:43:a5:d3:e0:2c:06:
ac:34:5d:a4:43:25:f3:20:98:21:63:e3:65:89:ce:1a:58:4c:
74:d8:ba:cd:18:07:a3:7f:39:b7:dc:19:63:2d:8f:cb:9a:60:
99:e7:92:87:98:8f:27:94:9d:e0:17:15:e6:97:c6:d1:db:04:
44:6c:68:33:45:ba:57:ce:b5:a1:88:3f:e8:b3:95:8f:a3:5f:
24:cd:72:ac:b7:a4:ef:3b:7f:69:2a:dc:4e:8e:67:db:05:cc:
e8:f9:38:6e:5b:c0:c7:eb:d7:c5:66:bc:2f:09:68:40:e8:74:
9c:84:14:c2:12:9c:72:f7:1f:da:ae:4b:5f:f7:7b:09:8a:db:
56:a3:3d:17:0d:29:00:2b:2f:a8:c6:91:a7:82:c8:06:2f:eb:
4d:13:59:d2:db:1a:02:be:81:ef:d2:ab:9a:27:56:79:6e:ca:
5c:b1:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:59 2026 by rpki-client